Skip to content

Security1 publisher3 min readPublished

Norway opens a crimes-against-humanity investigation into Telenor's Myanmar data handovers

Two Norwegian agencies opened criminal investigations into Telenor on Tuesday over the customer data its Myanmar unit handed the junta and the sanctioned surveillance equipment sold along with the unit.

The Watch · Security desk

Illustration accompanying Norway opens a crimes-against-humanity investigation into Telenor's Myanmar data handovers

What happened

  • Norway's National Criminal Investigation Service is investigating Telenor for complicity in crimes against humanity over its Myanmar operations, from the February 2021 coup to the sale of the subsidiary in March 2022.
  • Law enforcement raided Telenor's Oslo headquarters on the same day the two agencies announced their investigations.
  • Telenor sold the Myanmar business to Lebanon's M1 Group, which then sold 80% of it to Shwe Byain Phyu, a company run by allies of the military government.

Compiled by The WatchSomething wrong?How this is made

Why it matters

  • exposure A retention database built to satisfy a host country's law is now criminal evidence in the operator's home country, and the Norwegian state is the majority shareholder of the company its own police are investigating.
  • decision Operators in markets like this have to settle in advance which orders they will refuse and who is authorised to refuse them, because prosecutors are the ones who will weigh the duress argument.
  • constraint Selling out of a hostile market leaves the exposure in place: transferring surveillance kit with the business is treated as an export decision requiring ministry sign-off.
  • contradiction Telenor says it had no real choice, yet it also says it initially refused to let the military install surveillance equipment, which puts the extent of what could be refused at the centre of the case.

Telenor said local law in Myanmar required it to store customer data for several years, and that following that law was how it protected its employees [14]. Those stored records are the subject of the complicity case. Norwegian officials said the basis of the charge is that Telenor "repeatedly handed over historical traffic data about customers to the military regime during this period, at the same time as the regime was responsible for extensive abuses against parts of the civilian population" [6].

The company published the volume itself. Before the sale, Telenor said it had complied with at least 200 military requests for customer information over the previous year, according to Myanmar Now [12]. Spread over 365 days, that is one handover roughly every other day [21]. The investigated period, from the coup to the completed sale, runs 417 days [20].

Telenor is arguing duress. Spokesperson David Fidjeland said employees "risked imprisonment, torture or the death penalty if the military authorities' orders were not complied with" [7]. "This was a very demanding situation in which we found that we had no real choice and that we could not put our employees' lives at risk," Fidjeland said [8]. He said the company has already handed documents and other information to law enforcement agencies [9]. Telenor has also said it initially rebuffed military efforts to install surveillance equipment on its systems [13].

The second investigation looks at how Telenor got out. The Police Security Service says the sale of the Myanmar subsidiary included sanctioned surveillance equipment and was done without permission from Norway's Ministry of Foreign Affairs [2]. The buyer was the Lebanese company M1 Group, which almost immediately sold 80% of the business to Shwe Byain Phyu, a company run by allies of the military government [10]. According to The Record, human rights experts said the sale handed over the historical call data of more than 18 million people [11].

The criminal files arrive after the civil ones. Myanmar civil society groups sued Telenor last year, claiming its data was used to locate, detain and torture people, and at least one person was executed after being arrested allegedly because of information obtained through Telenor data [16][17]. A Swedish nonprofit filed a class action in April on behalf of 1,200 people who allegedly had their data shared with the junta [18]. Yadanar Maung of Justice For Myanmar warned in 2022 that Telenor's systems and data would be used to "track down, arrest, torture and murder civil society activists and journalists" [19].

The complicity case is at the investigation stage, and the announcement as reported names Telenor as the subject and does not name individual suspects [23]. Telenor has operated in Myanmar since 2014 [15].

What to watch

  • Whether the National Criminal Investigation Service moves from the company to named individual suspects.
  • Whether the Ministry of Foreign Affairs confirms it was never asked to approve the transfer of the sanctioned surveillance equipment.
  • Whether the Myanmar civil society suit or the Swedish class action for 1,200 people gets access to the material Telenor gave police.
Loading claim ledger
Loading source directory links
Loading share composer
Loading topic controls
Loading related stories